FreeBSD

FreeBSD 12 — gld — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gld — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gld — format string and buffer overflow vulnerabilities Related CVEs: CVE-2005-1099 CVE-2005-1100 Upstream summary: Gld has been found vulnerable to multiple buffer overflows as well as multiple format string vulnerabilities. […]

Read more
FreeBSD 12 — py34-rsa — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py34-rsa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-rsa — Bleichenbacher'06 signature forgery vulnerability Related CVEs: CVE-2016-1494 Upstream summary: Filippo Valsorda reports: python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with […]

Read more
FreeBSD 12 — matomo — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — matomo — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: matomo — XSS vulnerability Upstream summary: Matomo reports: Several XSS issues have been fixed thanks to the great work of security researchers who responsible disclosed issues to us. Table of […]

Read more
FreeBSD 12 — linux-c6-openssl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c6-openssl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — Padding oracle vulnerability Related CVEs: CVE-2014-3513 CVE-2014-3566 CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572  +12 more Upstream summary: The OpenSSL project reports: 0-byte record padding oracle (CVE-2019-1559) (Moderate) If […]

Read more
FreeBSD 12 — id3lib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — id3lib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: id3lib — insecure temporary file creation Related CVEs: CVE-2007-4460 Upstream summary: Debian Bug report log reports: When tagging file $foo, a temporary copy of the file is created, and for […]

Read more
FreeBSD 12 — py24-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py24-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 12 — zathura-pdf-mupdf — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zathura-pdf-mupdf — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mupdf — multiple vulnerabilities Related CVEs: CVE-2016-6265 CVE-2016-6525 Upstream summary: Tobias Kortkamp reports: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a […]

Read more
FreeBSD 12 — grip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — grip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: grip — CDDB response multiple matches buffer overflow vulnerability Related CVEs: CVE-2005-0706 Upstream summary: Joseph VanAndel reports that grip is vulnerability to a buffer overflow vulnerability when receiving more than […]

Read more
CHAT